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(57) Abstract 

The embodiments of the present invention teaches 
a system and method which allows card issuers to se- 
curely add applications (305A-305C) during the lifetime 
of the card (304) after the card has already been issued 
(post issuance). The system and method according to 
embodiments of the present invention allows the load- 
ing of an application and/or objects from an application 
server via a card acceptance device and its supporting 
system infrastructure delivery mechanism, onto a card 
post issuance in a secure and confidential manner. 
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A SYSTEM AND METHOD FOR A MULTI- APPLICATION SMART CARD WHICH CAN 
FACILITATE A POST-ISSUANCE DOWNLOAD OF AN APPLICATION ONTO THE 

SMART CARD 

5 FTELD OF THK INVENTION 

The present invention relates to smart cards. In particular, the present invention relates to a 
system and method for providing a multi-application smart card which can facilitate a post- 
issuance download of an application onto the smart card. 

10 

Background of the Invention 

A smart card is typically a credit card-sized plastic card that includes a semiconductor chip 
capable of holding data supporting multiple applications. 

15 Physically, a smart card often resembles a traditional "credit" card having one or more 

semiconductor devices attached to a module embedded in the card, providing contacts to the 
outside world. The card can interface with a point-of-sale terminal, an ATM, or a card reader 
integrated into a telephone, a computer, a vending machine, or any other appliance. 

A micro-controller semiconductor device embedded in a ^'processor" smart card allows the 
20 card to undertake a range of computational operations, protected storage, encryption and decision 
making. Such a micro-controller typically includes a microprocessor, memory, and other 
functional hardware elements. Various types of cards are described in "The Advanced Card 
Report: Smart Card Primer", Kenneth R. Ayer and Joseph F. Schuler, The Schuler 
Consultancy, 1993. 

25 One example of a smart card implemented as a processor card is illustrated in FIG. 1 . Of 

course, a smart card may be implemented in many ways, and need not necessarily include a 
microprocessor or other features. The smart card may be programmed with various types of 
functionality, including applications such as stored-value; credit/debit; loyalty programs, etc. 

1 
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In some embodiments, smart card 5 has an embedded micro-controller 10 that includes a 
microprocessor 12» random access memory (RAM) 14, read-only memory (ROM) 16, non- 
volatile memory 1 8, a cryptographic module 22, and a card reader interface 24. Other features of 
the micro-controller may be present but are not shown, such as a clock, a random number 
5 generator, interrupt control, control logic, a charge pump, power connections, and interface 
contacts that allow the card to communicate with the outside world. 

Microprocessor 12 is any suitable central processing unit for executing commands and 
controlling the device, RAM 14 serves as storage for calculated results and as stack memory. 
ROM 16 stores the operating system, fixed data, standard routines, and look up tables. Non- 
10 volatile memory 18 (such as EPROM or EEPROM) serves to store information that must not be 
lost when the card is disconnected from a power source but that must also be alterable to 
accommodate data specific to individual cards or any changes possible over the card lifetime. 
This information might include a card identification number, a personal identification number, 
authorization levels, cash balances, credit limits, etc. Cryptographic module 22 is an optional 
15 hardware module used for performing a variety of crptographic algorithms. Card reader interface 
24 includes the software and hardware necessary for communication with the outside world. A 
wide variety of interfaces are possible. By way of example, interface 24 may provide a contact 
interface, a close-coupled interface, a remote-coupled interface, or a variety of other interfaces. 
With a contact interface, signals from the micro-controller are routed to a number of metal 
20 contacts on the outside of the card which come in physical contact with similar contacts of a card 
reader device. 

Various mechanical and electrical, characteristics of smart card 5 and aspects of its 
interaction with a card reading device are defined by the following specifications, all of which are 
herein incorporated by reference. 

25 Visa Integrated Circuit Card Specification . (Visa International Service Association 1996). 

EMV Integrated Circuit Card Specification for Payment Svstems. (Visa International 
Service Association 1996). 
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EMV Integrated Circuit Card Terminal Specification for Payment Systems. (Visa 
International Service Association 1996). 

EMV Integrated Circuit Card Application Specifi cation for Payment Systems. (Visa 
International Service Association 1996). 

5 International Standard: Identification Cards - Integ rated Circuitry Cards with Contacts. 

Parts 1-6 (International Standards Organization 1987-1995). 

Prior to issuance of a smart card to a card user, the smart card is initialized such that 
some data is placed in the card. For example, during initialization, the smart card may be loaded 

10 with at least one application, such as credit or stored cash value, a file structure initialized with 
default values, and some initial cryptographic keys for transport security. Once a card is 
initialized, it is typically personalized. During personalization, the smart card is loaded with 
data which unjquely identifies the card. For example, the personalization data can include a 
maximum value of the card, a personal identification number (PIN), the currency in which the 

1 5 card is valid, the expiration date of the card, and cryptographic keys for the card. 

A limitation of conventional smart cards is that new applications typically can not be added 
to an issued smart card. Smart cards are traditionally issued with one or more applications 
predefined and installed during the manufacturing process of the card. As a .result, with 
traditional smart card implementation, once a card has been issued to a card user, the smart card 
20- becomes a fixed application card. If a new application is desired, the smart card is typically 
discarded and a new smart card, which includes the new application, is issued. 

It would be desirable to provide a smart card which would allow applications to be loaded 
after the card is issued. Further, it is desirable to provide a mechanism to manage the loading of 
an application as well as general management of the applications on the smart card. Additionally, 
25 it is desirable to allow an application provider to keep cryptographic keys confidential from the 
issuer of the smart card and to securely allow application from different entities to coexist on a 
card. 
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Summary of the Invention 

Embodiments of the present invention teach a system and method which allow card issuers 
to add applications during the lifetime of the card after the card has already been issued (referred 
to herein as post issuance loading). Downloading an application after the card has been issued to 
5 the card holder will be referred to herein as a "secure install" process. 

The system and method according to embodiments of the present invention allow the 
loading of an application and/or objects from an application server via a card acceptance device 
and its supporting system infrastructure delivery mechanism, onto a card, post issuance in a 
secure and confidential manner. 

10 An embodiment of the present invention provides a system and method for controlling at 

least one function associated with an issued smart card. In a multi-application smart card, a 
privileged application, herein referred to as a card domain, manages multiple functions related to 
the smart card. Examples of these functions include card initialization* global card data, card life 
cycle, and secure installation of smart card applications. 

15 

A method according to an embodiment of the present invention for providing a first 
application onto an issued sman card comprises the steps of forwarding the first application to the 
issued smart card; and loading the first application onto the issued smart card, wherein the 
loading of the first application is managed by a second application. 

20 In another aspect of the invention, a system according to an embodiment of the present 

invention for controlling at least one function associated with an issued smart card is disclosed. 
The system comprises a first application associated with the issued smart card; and a second 
application associated with the issued smart card, the second application being in communication 
with the first application, wherein the second application manages at least one function associated 

25 with the first application. 
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Furthermore, an embodiment of the present invention provides a system and method for 
providing confidential information to an application in a smart card. In a multi-application smart 
card, a privileged application, herein referred to as a security domain, is utilized as a confidential 
representative of an application provider. The security domain can contain cryptographic keys 

5 which can be kept confidential from the smart card issuer, thus allowing separation of 

cryptographic security between the issuer and the application provider. When a new application 
is loaded onto a smart card, the newly loaded application can utilize its associated security 
domain's cryptographic service. A privileged application representing the issuer, herein referred 
to as a card domain, can approve of commands, such as commands for initialization and 

10 personalization, by invoking the security domain's cryptographic service. In this manner, a post 
issuance download of an application onto the issued smart card can be accomplished. 

A method according to an embodiment of the present invention for providing confidential 
information to an application in a smart card is presented. The method comprises the steps of 
providing a first application in the smart card, the first application including a cryptographic 

1 5 service; loading a second application onto the smart card; and installing the second application, 
wherein the cryptographic service of the first application is utilized to install the second 
application. 

In another aspect of the invention, a system according to an embodiment of the present 
invention for providing confidential information to an application in a smart card is presented. 
20 The system comprises a first application associated with the issued smart card, wherein the first 
application includes cryptographic service; and a second application associated with the issued 
smart card, the second application being in communication with the first application, wherein the 
cryptographic service .included in the first application is utilized for at least one function related to 
the second application. 

25 In yet another aspect of the invention, a method according to an embodiment of the present 

invention for providing an application to a smart card is presented. The method comprising the 
steps of issuing a smart card; loading a first application onto the issued smart card; and initializing 
the first application. 
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Brief DEsrRTPTioN of the Drawings 



Figure 1 is a block diagram of a smart card system suitable for implementing the present 
invention. 

Figure 2 is an example of a block diagram of software layers which can be utilized in a 
5 smart card. 

Figures 3 A - 3B are block diagrams of examples of software layers according to 
embodiments of the present invention. 

Figure 4 is a flow diagram of an example of a method according to an embodiment of the 
present invention for installing an application onto an issued smart card utilizing a card domain. 

10 Figure 5 is a flow diagram of a method according to an embodiment of the present 

invention for providing confidential information to an application in a smart card using security 
domains. 

Figure 6 is a flow diagram of an example of a method according to an embodiment of the 
present invention for installing an application onto an issued smart card utilizing a card domain. 

1 5 Figure 7 A is a flow diagram illustrating a sequence of card life states. 

Figure 7B is a flow diagram illustrating a sequence of card life states. 

Figure 8 is an illustration of an example of a card life cycle. 

Figure 9 is a flow diagram of an example of a method according to an embodiment of the 
present invention for blocking a card utilizing a card domain. 

20 Figure 10 is a block diagram illustrating interactions between a card domain and a security 

domain on a smart card according to an embodiment of the present invention. 
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Figures 1 1 A and 1 IB are flow diagrams of an example of a method according to an 
embodiment of the present invention for loading an application by using a security domain after 
the smart card has issued. 

Figures 12A-12B are flow diagrams of an example of a method according to an alternate 
5 embodiment of the present invention for loading an application using a security domain after the 
smart card has issued. 

Figure 13 is a block diagram illustrating an example of key management and key 
dependencies for post issuance download of applications onto the smart card. 
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Detailed Description of thr Prfft^rr ed E\monntnrMXQ 

The following description is presented to enable one of ordinary skill in the art to make 
and to use the invention and is provided in the context of a patent application and its 
requirements. Various modifications to the preferred embodiments will be readily apparent to 
5 those skilled in the an and the generic principles herein may be applied to other embodiments. 
Thus, the present invention is not intended to be limited to the embodiment shown but is to be 
accorded the widest scope consistent with the principles and features described herein. 

Figure 2 is a block diagram of an example of software layers which can be utilized in a 
sman card. The smart card shown in Figure 2 includes an operating system 200, a card 

0 application programming interface (API) 204, and applications 206A-206B. Operating system 
200 can include functionality to control the cards, memory management, input/output (I/O), and 
cryptographic features. Card API 204 utilizes the instructions from operating system 200 and 
writes these instnictions into blocks which can be reused for common routines in multiple 
applications. Applications 206A and 206B can mn on the smart card via instructions from API 

1 204. These applications can include any application which can run on a smart card, such as 
stored value, credit, debit, transit, and loyalty. 

One embodiment of the present invention is based upon the Java Card 
standard. In this case applications are referred to as 'Applets' and they are written to link to a 
- Java Card API which is the application programming interface present on smart cards built to the 
Java Card standard. 

• Although the conventional software system shown in Figure 2 allows for multiple 
applications, it does not solve the problem of how to load, securely, an application after issuance 
of the smart card to a user. If an application is to be loaded post issuance, a mechanism is needed 
to manage the loading of an application as well as general management of the applications on the 
smart card. Additionally, an application provider may wish to keep cryptographic keys 
confidential from the issuer of the smart card. Accordingly, a mechanism is needed to provide 



8 



wo 98/43212 PCT/US98/05674 

for the separation of confidential information between an application provider and an issuer of a 
smart card. Embodiments of the present invention address such a need. 

Figures 3 A - 3B are block diagrams showing software components of a smart card 
according to embodiments of the present invention. The arrows indicate dependencies between 
5 components. Figure 3 A shows an embodiment of a sman card utilizing a card domain, while 
Figure 3B shows an embodiment of a smart card utilizing a security domain, as well as a card 
domain. 

The example shown in Figure 3A includes an operating system 300, a card API 304, 
applications 305A-305C, a card domain 308, and open platform (OP) API 306. The system 
10 shown in Figure 3 allows for a secure and managed post issuance download of an application 
onto a smart card. 

Open platform API 306 classifies instructions into card domain 308 and security domains 
3 lOA-3 lOB (shown in Figure 3B), Accordingly, OP API 306 facilitates the formation of 
instructions into sets which can be identified as being included as part of card domain 308 and 
15 security domains 310A-3 lOB, 

Applications 305 A-305C can include any application which can be supported by a smart 
card. Examples of these applications include credit, debit, stored value, transit, and loyalty. 
- Applications 305A-305C are shown to include command interfaces, such as APDU interfaces 
354A-354C which facilitate communication with the external environment. 

20 Applications 305 A and 305B can run on the smart card via instructions from card API 304. 

Card API 304 is implemented using the instructions from the card operating system and writes 
these instructions into blocks which can be reused for common routines for multiple applications. 
Those skilled in the art will recognize that a translation layer or interpreter may reside between 
API 304 and operating system 300. An interpreter interprets the diverse hardware chip 

25 instructions from vendor specific operating system 300 into a form which can be readily utilized 
by card API 304. 
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Card domain 308 can be a ''privileged" application which represents the interests of the 
smart card issuer. As a **privileged" application, card domain 308 may be configured to perform 
multiple functions to manage various aspects of the smart card. For instance, card domain 308 
can perform functions such as installing an application on the smart card, installing security 
5 domains 3 lOA-3 lOB (shown on Figure 3B), personalization and reading of card global data, 
managing card life cycle states (including card blocking), performing auditing of a blocked card, 
maintaining a mapping of card applications 305A-3O5C to security domains 3 10A-310B, and 
performing security domain functions for applications 305A-3O5C which are not associated with 
a security domain 310. 

10 Card domain 308 is shown to include an API interface 350 and a command interface, such 

as Application Protocol Data Unit (APDU) interface 352. APDU interface 352 facilitates 
interfacing with the external environment. In compliance with, e.g.. International Standards 
Organization (ISO) Standard 7816-4, entitled "Identification Cards - Integrated circuit(s) cards 
with contacts - Part 4, Inter-industry commands for interchange," which is herein incorporated 

15 by reference. 

For example, APDU interface 352 can be used during post issuance installation of an 
application or during loading of card global data. An application load and install option is 
performed via a set of appropriate APDU commands received by card domain 308. API interface 
350 facilitates interfacing with the internal smart card environment. For example, API interface 
20 350 can by used if card domain 308 is being utilized as a default in place of a security domain 
310, or if an application requires information such as card global data, key derivation data, or 
information regarding card life cycle. 

Memory allocations have been performed by the time an application is in an install state. An 
application is also personalized after loading and installing. A personalized application includes 
25 card holder specific data and other required data which allows the application to run. In addition 
to managing the installation and personalization of the application, card domain 308 can also 
manage global card information. Global card information includes information that several 
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applications may need to perform their functions, such as card holder name and card unique data 
utilized in cryptographic key derivations. Card domain 308 can be a repository for the global . 
card information to avoid storing the same data multiple times. 

Card domain 308 can also manage card life cycle states including card blocking. The smart 
5 card will typically move through several states during its life cycle. Card domain 308 keeps track 
of what state the card is in during its life cycle. Card domain 308 may also manage a block 
request to block virtually all functions of the card. Further details of card domain 308 
management of a block request will be discussed in conjunction with Figure 6. Card domain 308 
may also keep track of the state of an application during an application's life cycle. This kind of 
10 information regarding an application can be utilized during an auditing of a card. Auditing can be 
performed at any time during a card's lifetime. For instance, auditing may be performed after a 
card has been blocked or prior to installing a new application to validate the card contents. 
Although virtually all card functions are no longer functioning when a card is blocked, an issuer 
may be able to query card domain 308 for information regarding a state of an application or the 
15 life cycle state of the card. In this manner, the issuer of a card may still access a profile of the 
blocked card and its applications. 

Figure 3B shows an embodiment of the present invention utilizing a security domain 310. 
as well as card domain 308. The example shown in Figure 3B includes a operating system 300', 
- a card API 304', applications 305A-305C\ security domains 31 0A-310B', a card domain 308', 
20 and open platform (OP) API 306'. The system shown in Figure 33 also allows for a secure and 
managed post issuance download of an application onto a smart card. 

Card domain 308' can work in conjunction with a security domain 3 10. Security domain 
310 is a logical construct that can be implemented as an application to provide security related 
functions to card domain 308' and to applications associated with security domain 310. Security 
25 domains 3 lOA-3 lOB can assist in secure post issuance loading of an application onto the smart 
card. Security domains 3 lOA-3 lOB provide for a mechanism which keeps the application 
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provider's confidential information, such as cryptographic keys, from being disclosed to the 
issuer of the smart card. 



There may be multiple security domains 3 10 on a smart card, each represented by a unique 
cryptographic relationship. A security domain 310 is responsible for the management and 

5 sharing of cryptographic keys and the associated cryptographic methods which make up the 
security domain's cryptographic relationship. An application which is loaded to the smart card 
post issuance can be associated with a security domain, preferably with only one security 
domain. However, multiple applications may be associated with the same security domain 310. 
Applications installed on a smart card during the pre-issuance phase may optionally be associated 

10 with a security domain 3 10 on the smart card for purposes of loading confidential personalization 
data to those applications using security domain 310 keys. 

The software for security domain 310 may be installed by the card manufacturer at the time 
of card manufacturing (e.g., when the ROM is masked), or may be added during initialization or 
personalization stages. Security domains 3 10 can be implemented as selectable applications 

15 which are isolated from one another and the rest of the system. If security domain 310 is 

implemented in a Java card as an application, standard Java card security can be relied upon to 
ensure isolation of security domain 310. In addition, or alternatively, other security mechanisms 
such as hardware security which can be utilized through OP API 306 implementation. OP API 
306 may utilize special security features to enforce isolation of security domain 310. An example 

20 of such a security feature is the utilization of chip hardware security routines which may be 
employed by OP API 306. 

Each security domain 31 OA-31 OB provides a command interface, such as an Application 
Protocol Data Unit (APDU) interface 320A-320B, for communication off card and an on card 
API interface 322A-322B. 

25 The APDU interface 320A-320B consists of personalization commands and is intended to 

allow the initial loading of security domain keys and to support key rotation if desired during the 
life of the security domain. API interfaces 322A-322B may include a signature verification 

1 2 
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method and decryption method which are shared with card domain 308' for post issuance loading 
of applications. Additionally^ applications may utilize API interfaces 322A-322B for decrypting 
application confidential data. Note that card domain 308' may always function as a security 
domain and does so as the default, 

5 Security domain 310 manages signing and decrypting keys and provides cryptographic 

services using those keys. Security domain 310 processes APDU*s for numerous functions. 
These functions can include key management functions e.g.. functions to load or update keys. 
During Secure Installation of an application, security domain 310 can provide services to card 
domain 308* to decrypt an application install file and check the signature of an application file. 

10 For an application associated with a security domain 310, that application's security domain 310 
provides decrypt and signature functions, such as MACing on an update key APDU command 
during the personalization phase of a newly installed application. Thereafter, the application can 
use the updated key to decrypt and check signatures on subsequent key updates. 

The smart card issuer may decide whether security domain 310 utilizes a static key .or a 
1 5 session key for transactions. A static key is a cryptographic key which exists prior to processing 
APDUs and which exist during and after the processing of APDUs. A session key is a 
cryptographic key which can be generated for a particular transaction and is typically no longer 
used for APDU processing after the transaction. If a session key is utilized, security domain 3 10 
preferably derives its own session key for processing APDUs. 

20 Figure 4 is a flow diagram of a method accordingly to an embodiment of the present 

invention for providing an application onto a smart card. The example illustrated in Figure 4 also 
applies to installing a security domain 310 onto a smart card. Note that all of the flow diagrams 
in this application are merely examples. Accordingly, the illustrated steps of this and any other 
flow diagram herein, can occur in various orders and in varying manners in order to accomplish 

25 virtually the same goal. 

A smart card is issued (step 400), and an application is forwarded to the issued smart card 
(step 402). The forwarding of the application can occur through any electronic media which can 
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interface with a smart card and connect to an appropriate network. For example, devices such as 
an automatic teller machine (ATM), a display phone, or a home computer, can be used to forward 
an application to the issued smart card. The forwarded application is then loaded onto the smart 
card, wherein the loading of the application is managed by card domain 308 (step 404). 

Figure 5 is another flow diagram of a method according to an embodiment of the present 
invention for providing an application onto an issued smart card. A smart card is created and 
provided with a first application, the first application including a cryptographic service (step 
1002). A second application is loaded onto the smart card (step 1004). Thereafter, the second 
application is installed, wherein the cryptographic service of the first application is utilized to 
install the second application (step 1006). 

Figure 6 is another flow diagram of an example of a method according to an embodiment of 
the present invention for providing an application onto an issued smart card. This method for 
providing an application also applies to providing a security domain 3 10 onto the smart card. In 
the example shown in Figure 6, a card issuer deploys smart cards to customers (step 500). A 
decision is made to install vendor A's application onto the issued smart card (step 502). When a 
dialogue between the issuer and the smart card is initiated, a pre-signed copy of the application is 
forwarded to the smart card (step 504). As previously stated, the dialogue between the issuer 
and the smart card can occur via any electronic device which can interface with a smart card and 
connect to an appropriate network. The application can be pre-signed with a key equivalent to 
that which already exists on the card so that each application has a unique signature that can be 
verified by the card. 

Card domain 308 can then take the steps to load the application. Card domain 308 decrypts 
the forwarded application and checks the signature of the application (step 508). Card domain 
308 can decrypt the application with the issuer*s secret key. An appropriate cryptography 
method, such as Data Encryption Standard (DES) or 3DES, can be utilized to decrypt at least a 
portion of the application. Those skilled in the art will recognize that a number of cryptographic 
techniques may be used to implement embodiments of the present invention. For the purpose of 
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illustration, symmetric key techniques are addressed herein, although asymmetric techniques are 
also contemplated. A good general cryptography reference is Schneier, Applied Cryptography, 
2d Ed. (John Wiley, 1996), the contents of which are incorporated herein by reference. 

It is then determined whether the signature on the application is valid (step 5 10). If the 
5 signature associated with the application is not valid, then the application is not loaded onto the 
card and the process ends (step 520). If, however, the signature associated with the application 
is valid the application is then installed and available for personalization. During personalization 
the application receives personalization data (step 512). Personalization data includes data which 
is unique to the smart card user. For instance, in a airline loyalty application, personalization data 
10 can include the smart card user's seating preference, meal preference, and eligibility for various 

possible perks. This personalization data can also be signed and encrypted. ^ 

The application then invokes card domain's 308 decryption service (step 513). Card ' 
domain 308 can then performs a signature check (step 5 14). Methods of decrypting 
personalization data and performing signature checks are well known in the art. Finally, the 
1 5 application can then be activated (step 518). 

A new application which as been downloaded onto a smart card post-issuance can be stored 
in a variety of ways. One example is to store the application into a file. Another example is to 
maintain a pointer to the application object. 

Figure 7A is a flow diagram illustrating an example of a sequence of card life states. The 
20 sequence is preferably considered irreversible. The first card life state is when the smart card is 
Masked (700). During the Masked state (700), the smart card obtains its operating system, card 
identification, and preferably at least one application. The Masked state (700) is achieved as soon 
as all of the necessary components for card initialization are made available. An example of when 
necessary components are made available is when card domain 308 and OP API 306 are enabled, 
25 as well as the Java card environment being enabled, such as Java card virtual machine 302 and 
Java card API 304 (both of Figure 3). 
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After the Masked state, the next state is the Initiahzed (step 702) state. The Initialized state 
is achieved once all card activity requiring an initialization key is complete. As part of card 
initialization, if not already available, the card domain 308 application must be installed and 
registered. In addition , one or more security domains may also be installed and registered. 
5 These installed domains must then be selected and personalized. An initialization key is a secret - 
key which is typically used by a smart card manufacturer during loading of data onto the smart 
card prior to issuance. 

The next state is Load Secured (step 704). The Load Secured state is achieved after a 
secure install (post-issuance download) mechanism for loading of applications through the 
10 remainder of the card lifetime has been established. 

The final card life state is when the card is either expired or blocked (step 706). The 
blocked state is achieved as soon as an authorized smart card application has received a command 
to block the card. 

The card life cycle is preferably an irreversible sequence of states with increasing security. 

15 Initialization and all subsequent card life cycle states and their transition are preferably under the 
control of card domain 308. Card domain 308 executes and responds to commands that result in 
a transition in a card life cycle from one state to the next. These commands are preferably 
Application Protocol Data Unit (APDU) commands. Card domain 308 is also responsible for the 
installation of applications on the card, but preferably has no control over the applications' life 

20 cycle states. Each application is preferably responsible for its own application life cycle state 
management but it preferably allows card domain 308 to have access to its life cycle states for 
auditing purposes. - 

The Card Life cycle is designed in such a way to increase the level of security enforced by 
the card at each successive state. As stated above, the cycle is also established as a process 
25 which can only ratchet forward to ensure that once the card begins a life cycle state with 

associated security policies, the only option is to cycle forward to the next state in the life cycle 
with a higher level of security. The Card Domain as the system security manager of the card 
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maintains the current life cycle state, enforces the associated security policies, and controls the 
state transitions in the Card life cycle. 

Figure 7B is a flow diagram illustrating an example of a sequence of an application life 
cycle. The application is initially unavailable (step 750). The next state is a loaded state (step 
5 752). The application reaches the loaded state once the application has been loaded onto the 
smart card. The application is then installed (step 754), and registered (step 756). Once the 
application is registered, it can be deleted at any time thereafter. The next state is the personalized 
state, wherein personalized information is included in the application (step 758). Finally, the 
application may expire or be blocked (step 760). 

10 Figure 8 is an illustration of an example of multi-application card life time line. This time 

line starts with a Masked ROM stage 800 and ends with a card blocked/expired stage 802. At 
Masked ROM stage 800, applications A, B, C and D are shown to be installed. This example 
shows applications A and B being installed at a masking stage of the card, applications C and D 
being installed at initialization stage, and applications D and F being installed post issuance. 

15 In this example, application A can be installed in ROM and used during the complete'life of 

the card from Masked ROM stage 800 to card blocked/expired stage 802. Application B is also 
in ROM and utilized during a first portion of the life of the smart card. The life of application B 
is ended at stage 804A. Application C is located in non-volatile memory, such as EEPROM, 
which is loaded during initialization. Application C is shown to expire at stage 804B. 

20 Application D is also located in EEPROM and is used for the complete life of the card until card 
blocked/expired stage 802. Application E is installed at stage 806A, sometime after issuance of 
the- smart card. Application E is located in EEPROM and used until the end of the card life at card 
blocked/expired stage 802. Application F is also installed post issuance at stage 806B, and 
expires sometime before the end of the card life at stage 804C. 

25 Figure 9 is a flow diagram of a method according to an embodiment of the present 

invention for blocking a card. A card be can be blocked if a breach of security is detected by an 
application. According to an embodiment of the present invention, a smart card can be blocked 
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while an application is in use. A blocked card will no longer operate so that a suspect user cannot 
utilize any of the applications on the smart card. Blocking is merely one example of the many - 
functions card domain 308 can perform in managing the other applications on the smart card. 
Examples of other functions include installing an application on the smart card, installing security 
5 domains 3 lOA-3 lOB. personalization and reading of card global data, managing card life cycle 
states including card blocking, performing auditing of a block card, maintaining a mapping of 
card applications to security domains, and performing security domain functions for applications 
which are not associated with a security domain. 

In the example shown in Figure 9, an application is currently in use (step 600). The 
10 application detects a problem which triggers a card block request from the application (step 602). 
The application then sends a card block request to card domain 308 (step 604). Card domain 308 
determines whether the card block request is valid (step 606). A card block request can be valid 
if the request originates from a predetermined application. If the card block request is not va|id, 
the card domain 308 does not block the smart card (step 608). However, if the card block 
1 5 request is valid, then card domain 808 authorizes the card blocking (step 610), and card domain 
308 blocks the smart card (step 612) such that the smart card will reject any attempted 
transactions for any of the applications on the card. 

Figure 10 is a block diagram illustrating the use of security domain 310 by the card domain 
308. The method and system according to an embodiment of the present invention allows for 
20 multiple application providers to be represented on a smart card in a secure and confidential 
manner. This security and confidentiality can be achieved through the use of security domain 
3 lOA-3 lOB shown in Figure 3. 

Figure 10 illustrates an example of a smart card which contains two security domains 
3 lOA-3 lOB. In this example, it is assumed that a masked application 305 A from the smart card 
25 is associated with a security domain, such as security domain 310A, and an additional application 
305B will be added post issuance and be associated with a second security domain, such as 
security domain 310B. The arrows indicate key relationships between the various smart card 
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entities. Masked application 305 A uses key services from security domain 3 lOA for decrypting 
confidential data and optionally for full personalization. Card domain 308 uses key services from 
security domain 3 1 OB for decrypting and checking the signature of an application loaded post 
issuance, such as post issuance loaded application 305B. Post issuance loaded application 305B 
5 uses key services from security domain 3 lOB for decrypting confidential data and optionally for 
full personalization. 

Figures I lA and 1 IB are further flow diagrams of an example for a method according to an 
embodiment of the present invention for providing an application onto an issued smart card. The 
card issuer decides to include a security domain 310 onto a smart card (step 1 100). The issuer 

10 assigns security domain 310 to vendor A (step 1 102). Vendor A» or an application developer on 
behalf of vendor A, generates cryptographic keys such as those used in symmetric or asymmetric 
cryptography operations (step 1 104). Examples of these cryptography operations include 
encryption, decryption, MACing, Hashing, and digital signatures. Examples of cryptographic 
methods which utilize such keys and are suitable for implementation for the embodiment of the 

15 method and system of the present invention include Data Encryption Standard (DES) and 3DES. 
The card personalization agent receives the keys and loads security domain keys associated with a 
specific security domain 3 1 0 for each smart card ( 1 106). The card personalization agent receives 
smart cards and collects other data, such as application and card holder specific data, and places 
data on the smart card (step 1 108). 

20 The card issuer then deploys the smart card to customers (step 1110). A decision is then 

made to install vendor A*s application on the smart card (step 1 1 12). When a dialogue between 
the smart card issuer and the smart card is initiated, a signed copy of the application is forwarded 
to the smart card (step 1 1 14). The application can be signed with a key equivalent to that which 
already exists on the smart card so that each application has a unique signature that can be verified 

25 by the smart card. 

The smart card's card domain 308 then takes steps to load the application. Card domain 
308 invokes an associated security domain's cryptographic service to decrypt the application and 
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check the signature (step 1118), It is then determined if the signature is valid (step 1 120). If the 
signature is not valid, the process ends (step 11 22). If, however, the signature is found to be- 
valid, then the application receives personalization data which can be signed and optionally 
encrypted (step 1 124). The loaded application then invokes its associated security domain's 
5 decryption service and signature check (step 1 126). Secret keys required to run or operate the 
application on the smart card are used to activate the application by authentication (step 1 130). 

Figures 12A and 1 2B are flow diagrams of a method according to another embodiment of 
the present invention for providing confidential information to an application using a security 
domain 310. The issuer decides to include a security domain 3 10 on a smart card (step 1200). A 
10 trusted pany generates secret cryptographic keys and sends the keys to a card personalization 
agent in a secure manner (step 1201). A trusted party is typically a third party who performs the 
function of certifying the source of information, such as a signature. A card personalization 
agent (which may be the same as the tmsted party) receives the key and loads a unique secure 
domain key associated with a specific security domain 3 10 for each smart card (step 1202). 

15 The card personalization agent receives the smart card and collects other data, such as 

application and card holder specific data, and places the data on the smart card (step 1204). The 
issuer then deploys the smart card to its customers (step 1206), A decision is made to install 
vendor A*s application on the issued smart card (step 1208). Vendor A obtains secret keys for 
security domain 3 10 from the trusted party (step 1210). Vendor A then sends the smart card 

20 issuer a signed copy of Vendor A*s application (step 1212). 

When a dialogue between the smart card issuer and the smart card is initiated, a signed 
' copy of the application is forwarded to the smart card (step 1214). The application can be signed 
with a key equivalent to that which already exists on the smart card so that each application has a 
unique signature that can be verified by the smart card. Card domain 308 invokes security 
25 domain's cryptographic service to decrypt the associated application and check its signature (step 
1218). It is then determined whether the signature is valid (step 1220). If the signature is not 
valid, then the process ends (step 1222). 
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If, however, the signature is valid, then the application receives personalization data, which 
can be signed and optionally encrypted (step 1224). The loaded application then invokes security 
domain's decryption service and signature check (step 1226). The cryptographic secret data 
required to mn or operate the application on the card are used to activate the application (step 
5 1230). 

Figure 13 is a block diagram illustraung the use of cryptographic keys for post issuance 
loading of an application onto a smart card. Applications that are not masked and not loaded 
during card initialization stage or personalization stage need their executables downloaded using a 
secure installation method, such as the post issuance download described in previous Figures. 
1 0 The applications can be loaded using the card domain cryptographic keys. The applications are 
then decrypted and can have their signature verified using the key services of the corresponding 
security domain 310. Therefore, the desired security domain(s) 310 preferably have encryption 
and signature keys installed prior to the post issuance download of the corresponding application. 

In the example shown in Figure 13, only one security domain 310 is shown since security 
1 5 domains 3 10 for other applications are not relevant to illustrate the downloading of a single 

application. Note that the result of the secure installation is initially a loaded application, which 
must then be installed, registered and personalized. After loading, the application is installed, 
preferably by issuing an install APDU command to card domain 308. An application can be 
- installed when its install method has executed successfully. Memory allocations have been 
20 performed by the time an application is in an install state. A loaded application should also be 
registered. When an application is registered, it is selectable and it is ready to process and 
respond to APDU commands. Installation and registration may be performed simultaneously by 
the same APDU command. An application is also personalized after loading. A personalized 
application includes card holder specific data and other required data which allows the application 
25 to run. 

In the example shown in Figure 13, the cryptographic key and MACVSignature key are 
shown to be included in the functions of card domain 308/security domain 3 10. If a security 
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domain is associated with the application being loaded, then the security domain will be invoked. 
However, if no security domain 310 is associated with the application which is being loaded, 
then the cryptographic key and the signature key of card domain 308 will be utilized. In contrast 
to the install commands sent to the smart card during the initialization phase, the post issuance 
5 install command is not issued in a secured environment, therefore it is preferably protected with a 
cryptographic key, such as a MAC/Signature key. Card domain 308 manages the post-issuance 
loading of a new application, while secure domain 310 ensures the validity and integrity of the 
new application once the new application has been loaded onto the smart card. If a secure 
domain 3 10 is not associated with the newly loaded application, then card domain 308 performs 
10 secure domain's 3 10 functions. Once the new application is post-issuance downloaded, various 
keys, such as an cryptographic key and a signature key, are preferably utilized for installation and 
personalization of the application. 

A method and system for a smart card domain and a security domain has been disclosed. 
Software written according to the present invention may be stored in some form of computer- 
15 readable medium, such as memory or CD-ROM, or transmitted over a network, and executed by a 
processor. 

Although the present invention has been described in accordance with the embodiment 
shown, one of ordinary skill in the art will readily recognize that there could be variations to the 
embodiment and these variations would be within the spirit and scope of the present invention. 
20 Accordingly, many modifications may be made by one of ordinary skill in the art without 
departing from the spirit and scope of the appended claims. 
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CLAIMS 

1 . A method for providing a first application onto an issued smart card, the method 
comprising: 

5 forwarding the first application to the issued smart card; and 

loading the first application onto the issued smart card, wherein the loading of the first 
application being managed by a second application. 

2 . The method of claim 1 , further including a step of decrypting at least a portion of the first 
10 application. 

3 . The method of claim 2, wherein the decryption is provided by the second application. 

4. The method of claim 1 , further including a step of checking a signature associated with 
15 the first application. 

5 . The method of claim 4, wherein the checking of the signature is performed by the second 
application. 

20 6 . The method of claim 1 , further including a step of providing personalization data to the 
first application. 

7 , The method of claim 6, further including a step of decrypting the personalization data 
provided to the first application. 

25 

8 , The method of claim 7. wherein the decryption is provided by the second application. 

9, The method of claim 6, further including a step of checking a signature associated with 
the personalization data. 



23 



wo 98/43212 PCT/US98/05674 

10, The method of claim 9, wherein the checking of the signature is performed by the second 
application. 



1 1 , The method of claim 1 , further comprising a step of providing a cryptographic key related 
5 to the first application. 

12. The method of claim I , further comprising a step of invoking a third application's 
cryptography service to decrypt at least a portion of the first application. 

10 13. The method of claim 12, wherein the invoking is performed by the second application* 

1 4. The method of claim 1 , further comprising a step of invoking a third application to check 
a signature associated with the first application. 

15 15, The method of claim 14, wherein the invoking is performed by the second application. 

1 6. The method of claim 1 , further comprising a step of invoking a third application's 
cryptography service to decrypt at least a portion of personalization data associated with the first 
application. 

20 

17. The method of claim 16, wherein the invoking is performed by the second application. 

18. A system for controlling at least one function associated with an issued smart card, the 
25 system comprising: 

a first application associated with the issued smart card; and 

a second application associated with the issued smart card, the second application being in 
communication with the first application, wherein the second application manages at least one 
function associated with the first application. 
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19. The system of claim 18, wherein the at least one function includes personalization of the 
first application. 

5 20. The system of claim 1 8, wherein the at least one function includes card life-cycle states. 
2 1 . The system of claim 18, wherein the at least one function includes card blocking. 



22. The system of claim 18, wherein the at least one function includes auditing of a blocked 
10 card. 

23. The system of claim 18, wherein the at least one function includes maintaining a mapping 
of the first application to an associated security domain. 

15 24. The system of claim 1 8, wherein at least one function includes a cryptographic service 
associated with the first application. 

25 . The system of claim 1 8, wherein the second application also manages global data related 
to the issued smart card. 

20 

26. A system for providing a first application onto an issued smart card, the system 
comprising: 

means for forwarding the first application to the issued smart card; and 
means for loading the first application onto the issued smart card, wherein the loading of 
25 the first application being managed by a second application. 

27. A computer program product for providing a first application onto an issued smart card, 
comprising: 

computer code for forwarding the first application to the issued smart card; 
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computer code for loading the first application onto the issued smart card, wherein the 
loading of the first application. being managed by a second application; and 
a computer readable medium that stores the computer codes. 

5 28. The computer program product of claim 27» wherein the computer readable medium is 
selected from the group consisting of CD-ROM, floppy disk, tape, flash memory, system 
memory, hard drive, EEPROM, ROM, and data signal embodied in a carrier wave. 

29. A method for providing confidential information to an application in a smart card, the 
1 0 method comprising: 

providing a first application in a smart card, the first application including a cryptographic 

service; 

loading a second application onto the sman card; and 

installing the second application, wherein the cryptographic service of the first application 
1 5 is utilized to install the second application. 

30. The method of claim 29, wherein the step of loading the second application is performed 
after the smart card has issued. 

20 31. The method of claim 29, wherein an association between the first application and the 
second application is maintained, 

32. The method of claim 29, wherein details of the cryptographic service of the first 
application is kept confidential from an issuer of the smart card. 

25 

33. The method of claim 29, wherein the cryptographic service accessed in the first 
application is used in addition to a second cryptographic service included in a third application to 
perform the step of loading the second application. 
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34. The method of claim 29, wherein an association between the first application and the 
second application can be determined after the sman card has been issued. 



35. A system for providing confidential information to an application in a smart card, the 
5 system comprising: 

means for accessing a cryptographic service in a first application, the first application 
being included in the smart card; and 

means for loading a second application in the smart card, wherein the cryptographic 
service of the first application is utilized to load the second application. 

10 

36. A system for providing confidential information to an application in a sman card, the 
system comprising: 

a first application associated with the issued smart card, wherein the first application 
includes cryptographic service; and 
1 5 a second application associated with the issued smart card, the second application being in 

communication with the first application, wherein the cryptographic service included in the first 
application is utilized for at least one function related to the second application. 

37. A computer program product for providing confidential information to an application in a 
2a smart card, comprising: - 

computer code for accessing a cryptographic service in a first application, the first 
application being included in the smart card; and 

computer code for loading a second application in the smart card, wherein the 
cryptographic service of the first application is utilized to load the second application; and 
25 a computer readable medium that stores the computer codes. 

38 . The computer program product of claim 37, wherein the computer readable medium is 
selected from the group consisting of CD-ROM, floppy disk, tape, flash memory, system 
memory, hard drive, EEPROM, ROM. and data signal embodied in a carrier wave. 
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39. A system for providing confidential information to an application in a smart card, the 
system comprising: 

a first application associated with an issued smart card, wherein the first application 
5 includes cryptographic service; 

a second application associated with the issued smart card; and 

a third application associated with the issued smart card, the first and second applications 
being in communication with the third application, wherein the cryptographic service included in 
the first application is utilized for at lea'st a first function related to the second application. 

10 

40. The system of claim 39, wherein the second application invokes the cryptographic service 
of the first application for utilization on the at least first function related to the second application.- 

4 1 . The system of claim 39, wherein the second application manages at least a second 
15 function of the third application. 

42. The system of claim 39, wherein the first application includes a command interface, 

43. The system of claim 42, wherein the command interface is an APDU interface. 

20 

44. The system of claim 39, wherein the first application includes an API interface. 

A method for providing an application to a smart card, the method comprising: 
issuing a smart card; 

loading a first application onto the issued smart card; and 
initializing the first application. 



45. 

25 



46. The method of claim 45, wherein the loading of the application is managed by a second 
application. 
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47. The method of claim 46, wherein the second application is included in the issued smart 
card. 

5 48 . The method of claim 45, wherein the initializing of the first application includes a substep 
of utilizing a cryptographic service of a third application. 

49. The method of claim 48, wherein the third applicadon is included in the issued smart 
card. 

10 

50. The method of claim 45, wherein the initializing of the first application includes a.substep 
of invoking a cryptographic service by a fourth application for use by the first application, 
wherein the cryptographic service is included in a fifth application. 

15 51. The method of claim 50, wherein the fourth and fifth applications are included in the 
issued smart card. 

52. The method of claim 45, further including a step of personalizing the first application. 

20_ 53 . The method of claim 52, wherein the personalization of the first application includes a 
substep of utilizing a cryptographic service of a sixth application. 

54. The method of claim 53, wherein the sixth application is included in the issued smart 
card. 

25 

5 5 . The method of claim 52, wherein the personalization of the first application includes a 
substep of invoking a cryptographic service by a seventh application for use by the first 
application, wherein the cryptographic service is included in a eighth application. 
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56. The method of claim 55, wherein the seventh and eighth applications are included in the 
issued smart card. 
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